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Claims : 

1 . A method of monitoring an information system, 
comprising: 

5 providing a real-time engine unit (12) in communication 
with a broker unit (14), the engine unit (12) having an 
event source unit (30) and a metrics source unit (32) ; 
the engine unit (12) receiving an event signal (94) from 
the source unit (30) in a first protocol language; 
10 the engine unit obtaining a metrics parameter (48) in a 

signal (96) from the source unit (32) in a second protocol 
language; 

the engine unit (12) converting the first protocol language 
of the signal (94) and the second protocol language of the 
15 signal (96) to a third protocol language; 

the engine unit (12) transmitting a signal (74) in the 
third protocol language, the signal (74) containing 
information from the signals (94, 96) ; 

the broker unit (14) receiving information of the signal 
20 (74) in the third protocol language, the unit (14) 

converting the information in the third protocol language 
to a universal protocol language that is understood by a 
plurality of consumers (16a-16f); and 

the broker unit (14) sending signals (7 8a-78f) containing 
25 the information in the universal protocol language to the 
consumer units (16a-16f), respectively. 
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2. The method according to claim 1 wherein the method 
further comprises the engine unit (12) filtering 
information and correlating events . 

3. The method according to claim 1 wherein the method 
5 further comprises the engine unit (12) is only able to 

communicate with the broker unit (14). 

4. The method according to claim 1 wherein the method 
further comprises the broker unit (14) converting 

10 information from the engine unit (12) to a format that is 
readable by all the consumers (16a-16f). 

5. The method according to claim 1 wherein the method 
further comprises the broker unit (14) communicating with 

15 the engine unit (12) in a unique language (73) that is only 
used in communication with the broker unit (14) and the 
engine unit (12). 

6. The method according to claim 1 wherein the method 
20 further comprises the broker unit (14) converting 

information in a signal (74) to a uniform protocol (76) 
that is understood by all the consumers (16a-16f). 

7 . The method according to claim 1 wherein the method 
25 further comprises the source unit (30) monitoring events 

(42) without retrieving the events (42) . 
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8. The method according to claim 7 wherein the method 
further comprises grading the event (42) according to a 
severity grade. 

5 

9. ^ The method according to claim 1 wherein the method 
further comprises the event (42) triggering a second event. 

10. The method according to claim 1 wherein the method 
10 further comprises the metric source unit (32) monitoring 

metric parameters. 
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1. A method of monitoring an information system, 
comprising i 

providing a real -time engine unit {12) in 
cotnmunication with a broker unit (14) i the engine unit C12) 
having an event source unit (30) and a metrics source unit 
(32) ; 

the event source unit (3a) monitoring an event unit 

(42) ; 

the engine unit (12) receiving an event signal (94) 
from the source unit (30) in a first protocol language; 

linking a metrics parameter (48) of the utiit (32) to 
events in the event unit (42) of the event source unit (30) ? 

the metrics parameter (48) aounting a nutober of event 
occurrences of the event unit (42) / 

the metrics parameter > (48) comparing the number o£ 
event occurrences to a threshold value; 

the metrics parameter (43) sending an alert signal 
(95) when the number of event occurrences is greater than the 
threshold value; 

the engine unit (12) receiving the alert signal (96) 
Srom the source unit (32) in a second protocol language; 

the engine unit (12) converting the first protocol 
language of the signal (94) and the second protocol language 
of the signal (96) to a third protocol language; 

the engine unit (12) transmitting a signal (74) in the 
third protocol language, the signal (74) containing 
information from the signals (94, 96)/ 
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the broker unit (14) receiving information of the 
signal (74) in the third protocol language, the unit (14) 
converting the Information in the third protocol language to 
a universal protocol language that is understood by a 
plurality of consumers <16a-16f) j 

the broker unit (14) sending signals (78a~78f) 
containing the information in the universal protocol language 
to the consumer units (l«a-16f ) , respectively; and 

the consumer units (I6a-ief) receiving the signals 
(78a-7Sf) and displaying, in real-time, the metrics parameter 
(43) linked to the events in the event -unit (32) . 
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2. The method according to claim 1 wherein the method 
further comprises the engine unit (12) filtering information 
and correlating events. 

3. The method according to claim 1 wherein the method 
further comprises the engine unit (12) is only able to 
communicate with the broker unit (14) . 

4. The method according to alaim 1 wherein the method 
further comprises the broker unit (14) converting information 
from the engine unit (12) to a format that is readable by all 
the consumers (16a- 16f ) . 

E. The method according to claim 1 wherein the method 
further comprises the broker unit (14) aommunicating with the 
engine unit (12) in a unique language (73) that is only used 
in communication with the broker unit (14) and the engine 
unit (12) . 

6. The method according to claim 1 wherein the method 
further comprises the broker u»it (14) converting information 
in a signal (74) to a uniform protocol (76) that is 
understood by all the consumers (16a-l6f ) . 
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7. The method according to claim 1 wherein the method 
further comprises the source unit (30) monitoring events (42) 
without retrieving the events (42) . 

a . The method according to claim 7 wherein the method 
further comprises grading the event (42) according to a 
severity grade „ 

9. The method according to claim 1 wherein the method 
further comprises the event (42) triggering a second event. 

10. The method according to claim 1 wherein the method 
further comprises the metric source unit (32) monitoring 
metric parameters. ^ 
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